CVE-2024-21976

Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution.

Score

CVSS 3.1 8.8 High

Status

Deferred - psirt@amd.com

Published

2024-11-12

Last modified

2025-08-26

Weaknesses

CWE-20

Affected products

• Amd Ryzen Ai Software (Amd)

References

• https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7017.html